JWT Decoder Online — Header, Payload, Expiry

Decode a JSON Web Token and read the header, payload, and expiry as dates. The signature is shown and is not verified. Tokens are not stored.

How it works

Issued-at, not-before, and expiry claims are shown as UTC dates. An expired token is marked expired.
Decoding does not verify the signature and does not fetch keys from addresses inside the token.
Results update as you type. Your input is processed over HTTPS and is not stored or logged.
Input is limited to 256 KB per request.

Questions?

If you want to ask about JWT Decoder, something is unclear, or you want to suggest an improvement, mail me.